@smthrs/control 0.0.0-stage → 1.0.0-rc.3

package/dist/esm/ControlRpcs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ControlRpcs.d.ts","sourceRoot":"","sources":["../../src/ControlRpcs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAA;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAwB,MAAM,QAAQ,CAAA;AAC7E,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAClE,OAAO,EACL,eAAe,EACf,SAAS,EACT,SAAS,EAET,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACX,cAAc,EACd,YAAY,EACZ,WAAW,EACZ,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAQL,KAAK,SAAS,EAOf,MAAM,oBAAoB,CAAA;;;;;;AAE3B;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,qBAErC;CAAG;;AAEJ;;;;;GAKG;AACH,qBAAa,WAAY,SAAQ,gBAEoB;CAAG;AAExD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,aAAa;0BACF,CAAC,SAAS,EAAE,OAAO,SAAS,CAAC,IAAI,KAAK,OAAO;EACe,CAAA;AAEpF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,sDAAsD,CAAA;AAEhF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,aAAa,qGAMxB,CAAA;AAuBF;;;;;GAKG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mfAmHC,CAAA;AAEzB;;;;;;;GAOG;AACH,MAAM,WAAW,IAAI;IACnB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,YAAY,EAAE,CACrB,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EACzC,IAAI,CAAC,EAAE,IAAI,GAAG,SAAS,KACpB,MAAM,CAAC,MAAM,CAAC,OAAO,SAAS,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;CACxD;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;IAC5D,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAA;CAC1C;AASD;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAAI,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAG,MAAM,GAAG,SAKrF,CAAA;AAqBD;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,GAAI,SAAS,iBAAiB,KAAG,aAU/D,CAAA;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,GAAI,gBAAgB,aAAa,CAAC,aAAa,CAAC,KAAG,aAO9E,CAAA;AAEF;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,GAAG,SAAS,CAAA;CACnF;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,GAAI,eAAe,aAAa,EAAE,UAAS,WAAgB,2CAchF,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,GAAI,SAAS,iBAAiB,2CACY,CAAA;AAEtE;;;;;GAKG;AACH,eAAO,MAAM,aAAa,GAAI,YAAW,OAAO,SAAS,CAAC,IAIzD,2CAA8F,CAAA"}

package/dist/esm/ControlRpcs.js

@@ -0,0 +1,299 @@
+/**
+ * Schema-backed RPC projection of the control service.
+ *
+ * @since 0.1.0
+ */
+import { NotificationError } from "@smthrs/notifications/NotificationQueue";
+import { Context, Effect, Layer, Schema, SchemaTransformation } from "effect";
+import { Rpc, RpcGroup, RpcMiddleware } from "effect/unstable/rpc";
+import { AlreadyResolved, ClaimLost, CodeDrift, ControlErrorSchema, EnvelopeMismatch, FlowNotFound, InvalidInput, LaunchFailed, NoMatchingWait, PersistenceError, PlanDenied, PlanDigestMismatch, PlanNotFound, RunNotFound, TransportError, Unauthorized, Unavailable } from "./ControlError.js";
+import { ApprovalInputSchema, CancelInputSchema, ControlEvent, ListRequest, ListResponse, PlanCard, PlanInputSchema, Receipt, ResumeInputSchema, RunInputSchema, SignalInputSchema, SteerInputSchema, WatchFilter } from "./ControlSchema.js";
+/**
+ * Authenticated principal made available to control RPC handlers.
+ *
+ * @category services
+ * @since 0.1.0
+ */
+export class ControlPrincipal extends Context.Service()("/control/ControlPrincipal") {
+}
+/**
+ * Middleware boundary that authenticates control RPC requests.
+ *
+ * @category middleware
+ * @since 0.1.0
+ */
+export class ControlAuth extends RpcMiddleware.Service()("/control/ControlAuth", { error: Unauthorized }) {
+}
+/**
+ * Which authenticated principals read every run.
+ *
+ * `List` and `Watch` answer a principal this returns `true` for with every
+ * run: that principal is an operator. Every other principal reads only the
+ * runs it launched (`RunSummary.launchedBy`) and, from `Watch`, only their
+ * events. The authentication layer decides, because it is what knows which
+ * identities it can stamp: `layerBearerAuth` and `layerNoopAuth` stamp one
+ * principal and make it the operator, and `layerAuth` takes the rule as an
+ * option. Where nothing provides one, no principal is an operator.
+ *
+ * @category services
+ * @since 1.0.0
+ */
+export const RunVisibility = Context.Reference("/control/RunVisibility", { defaultValue: () => ({ seesAllRuns: () => false }) });
+/**
+ * The sentence a client reads when a control handler dies.
+ *
+ * @category defects
+ * @since 1.0.0
+ */
+export const defectMessage = "Something went wrong on our side. Not your fault.";
+/**
+ * Wire schema for a control RPC defect: an untyped failure that no procedure
+ * declares.
+ *
+ * Encoding replaces a defect value (an `Error`, a failure an `orDie` turned
+ * into a defect, any non-string value) with `{ name: "Error", message }`
+ * carrying {@link defectMessage}, so a driver message, path, or stack never
+ * reaches a client. The server logs the raw defect. A string passes unchanged:
+ * the RPC server's own request-decoding sentence, which describes the caller's
+ * payload, is one, and so is an author-written `Effect.die` sentence.
+ *
+ * Decoding is Effect's default `Schema.Defect()` decoding, so a client reads
+ * this shape and an older server's shape alike, and an older client reads this
+ * shape as an `Error`.
+ *
+ * @category defects
+ * @since 1.0.0
+ */
+export const ControlDefect = Schema.Json.pipe(Schema.decodeTo(Schema.Unknown, SchemaTransformation.transform({
+    decode: Schema.decodeSync(Schema.Defect()),
+    encode: (defect) => typeof defect === "string" ? defect : { name: "Error", message: defectMessage }
+})));
+const mutationErrors = Schema.Union([
+    RunNotFound,
+    ClaimLost,
+    InvalidInput,
+    PersistenceError,
+    Unavailable,
+    TransportError,
+    Unauthorized
+]);
+const resumeErrors = Schema.Union([
+    RunNotFound,
+    ClaimLost,
+    CodeDrift,
+    InvalidInput,
+    PersistenceError,
+    Unavailable,
+    TransportError,
+    Unauthorized
+]);
+/**
+ * The ten remote procedures corresponding to `Control` operations.
+ *
+ * @category groups
+ * @since 0.1.0
+ */
+export const ControlRpcs = RpcGroup.make(Rpc.make("Plan", {
+    defect: ControlDefect,
+    payload: PlanInputSchema,
+    success: PlanCard,
+    error: Schema.Union([FlowNotFound, InvalidInput, PersistenceError, Unavailable, TransportError, Unauthorized])
+}), Rpc.make("Run", {
+    defect: ControlDefect,
+    payload: RunInputSchema,
+    success: Receipt,
+    error: Schema.Union([
+        RunNotFound,
+        PlanNotFound,
+        PlanDenied,
+        PlanDigestMismatch,
+        EnvelopeMismatch,
+        ClaimLost,
+        CodeDrift,
+        InvalidInput,
+        LaunchFailed,
+        PersistenceError,
+        Unavailable,
+        TransportError,
+        Unauthorized
+    ])
+}), Rpc.make("Approve", {
+    defect: ControlDefect,
+    payload: ApprovalInputSchema,
+    success: Receipt,
+    error: Schema.Union([
+        PlanDigestMismatch,
+        EnvelopeMismatch,
+        AlreadyResolved,
+        PlanNotFound,
+        RunNotFound,
+        CodeDrift,
+        InvalidInput,
+        Unauthorized,
+        PersistenceError,
+        Unavailable,
+        TransportError
+    ])
+}), Rpc.make("Deny", {
+    defect: ControlDefect,
+    payload: ApprovalInputSchema,
+    success: Receipt,
+    error: Schema.Union([
+        PlanDigestMismatch,
+        EnvelopeMismatch,
+        AlreadyResolved,
+        PlanNotFound,
+        RunNotFound,
+        CodeDrift,
+        InvalidInput,
+        Unauthorized,
+        PersistenceError,
+        Unavailable,
+        TransportError
+    ])
+}), Rpc.make("Steer", {
+    defect: ControlDefect,
+    payload: SteerInputSchema,
+    success: Receipt,
+    error: Schema.Union([
+        RunNotFound,
+        InvalidInput,
+        PersistenceError,
+        Unavailable,
+        TransportError,
+        Unauthorized,
+        NotificationError
+    ])
+}), Rpc.make("Signal", {
+    defect: ControlDefect,
+    payload: SignalInputSchema,
+    success: Receipt,
+    error: Schema.Union([
+        RunNotFound,
+        NoMatchingWait,
+        InvalidInput,
+        PersistenceError,
+        Unavailable,
+        TransportError,
+        Unauthorized
+    ])
+}), Rpc.make("Cancel", { defect: ControlDefect, payload: CancelInputSchema, success: Receipt, error: mutationErrors }), Rpc.make("Resume", {
+    defect: ControlDefect,
+    payload: ResumeInputSchema,
+    success: Receipt,
+    error: resumeErrors
+}), 
+// `list` and `watch` carry the whole `ControlError` union in their contract,
+// so they name it once rather than restating its members. Two hand-copied
+// lists is how `CredentialConflict` came to be a control error the union did
+// not admit.
+Rpc.make("List", {
+    defect: ControlDefect,
+    payload: ListRequest,
+    success: ListResponse,
+    error: ControlErrorSchema
+}), Rpc.make("Watch", {
+    defect: ControlDefect,
+    payload: WatchFilter,
+    success: ControlEvent,
+    error: ControlErrorSchema,
+    stream: true
+})).middleware(ControlAuth);
+const authorizationHeader = (headers) => {
+    for (const [name, value] of Object.entries(headers)) {
+        if (name.toLowerCase() === "authorization")
+            return value;
+    }
+    return undefined;
+};
+/**
+ * The bearer credential a request carries, or `undefined` when its
+ * `Authorization` header is absent or is not a well-formed bearer scheme.
+ *
+ * @category getters
+ * @since 1.0.0
+ */
+export const bearerCredential = (headers) => {
+    const authorization = authorizationHeader(headers);
+    if (authorization === undefined)
+        return undefined;
+    const match = /^Bearer[\t ]+([^\t ]+)$/i.exec(authorization);
+    return match?.[1];
+};
+const encoder = new TextEncoder();
+/**
+ * Compares UTF-8 credentials without returning early for a secret-dependent
+ * byte or length difference.
+ */
+const constantTimeTokenEqual = (expected, actual) => {
+    const expectedBytes = encoder.encode(expected);
+    const actualBytes = encoder.encode(actual);
+    const length = Math.max(expectedBytes.length, actualBytes.length);
+    let difference = expectedBytes.length ^ actualBytes.length;
+    for (let index = 0; index < length; index++) {
+        difference |= (expectedBytes[index] ?? 0) ^ (actualBytes[index] ?? 0);
+    }
+    return difference === 0;
+};
+/**
+ * Authenticates one shared bearer token and stamps its server-owned principal.
+ * Missing, malformed, empty, and incorrect credentials all fail closed with
+ * the same `Unauthorized` response.
+ *
+ * @category constructors
+ * @since 0.1.0
+ */
+export const bearerAuthenticator = (options) => ({
+    authenticate: (headers) => {
+        const credential = bearerCredential(headers);
+        return options.token.length > 0 && credential !== undefined && constantTimeTokenEqual(options.token, credential)
+            ? Effect.succeed({
+                ...options.principal,
+                stampedAt: options.now?.() ?? Date.now()
+            })
+            : Effect.fail(new Unauthorized({ message: "A valid bearer credential is required" }));
+    }
+});
+/**
+ * The first authenticator to accept a request answers for all of them. Each
+ * is asked in order, and a request none accepts fails with the last refusal,
+ * or with the plain `Unauthorized` when there is nothing to ask.
+ *
+ * @category constructors
+ * @since 1.0.0
+ */
+export const anyAuthenticator = (authenticators) => ({
+    authenticate: (headers, call) => authenticators.reduce((attempt, authenticator) => Effect.catchTag(attempt, "/control/Unauthorized", () => authenticator.authenticate(headers, call)), Effect.fail(new Unauthorized({ message: "A valid bearer credential is required" })))
+});
+/**
+ * Provides `ControlAuth` from a transport-header authenticator, telling it
+ * which procedure and payload each frame carries. Each authenticated call
+ * also receives the {@link RunVisibility} rule for the principal it stamps.
+ *
+ * @category layers
+ * @since 0.1.0
+ */
+export const layerAuth = (authenticator, options = {}) => {
+    const visibility = { seesAllRuns: options.seesAllRuns ?? (() => false) };
+    return Layer.succeed(ControlAuth, (effect, call) => Effect.flatMap(authenticator.authenticate(call.headers, { rpc: call.rpc._tag, payload: call.payload }), (principal) => effect.pipe(Effect.provideService(ControlPrincipal, principal), Effect.provideService(RunVisibility, visibility))));
+};
+/**
+ * Provides `ControlAuth` using one shared bearer token. Its one principal is
+ * the operator and reads every run.
+ *
+ * @category layers
+ * @since 0.1.0
+ */
+export const layerBearerAuth = (options) => layerAuth(bearerAuthenticator(options), { seesAllRuns: () => true });
+/**
+ * Permissive authentication middleware for tests and trusted in-process use.
+ *
+ * @category layers
+ * @since 0.1.0
+ */
+export const layerNoopAuth = (principal = {
+    id: "test-principal",
+    kind: "test",
+    stampedAt: 0
+}) => layerAuth({ authenticate: () => Effect.succeed(principal) }, { seesAllRuns: () => true });
+//# sourceMappingURL=ControlRpcs.js.map

package/dist/esm/ControlRpcs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ControlRpcs.js","sourceRoot":"","sources":["../../src/ControlRpcs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAA;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAA;AAC7E,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAClE,OAAO,EACL,eAAe,EACf,SAAS,EACT,SAAS,EACT,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACX,cAAc,EACd,YAAY,EACZ,WAAW,EACZ,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,eAAe,EAEf,OAAO,EACP,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,EACZ,MAAM,oBAAoB,CAAA;AAE3B;;;;;GAKG;AACH,MAAM,OAAO,gBAAiB,SAAQ,OAAO,CAAC,OAAO,EAA2C,CAC9F,2BAA2B,CAC5B;CAAG;AAEJ;;;;;GAKG;AACH,MAAM,OAAO,WAAY,SAAQ,aAAa,CAAC,OAAO,EAElD,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;CAAG;AAExD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,CAE3C,wBAAwB,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;AAEpF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,mDAAmD,CAAA;AAEhF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAC3D,MAAM,CAAC,OAAO,EACd,oBAAoB,CAAC,SAAS,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IAC1C,MAAM,EAAE,CAAC,MAAM,EAAe,EAAE,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE;CACjH,CAAC,CACH,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC;IAClC,WAAW;IACX,SAAS;IACT,YAAY;IACZ,gBAAgB;IAChB,WAAW;IACX,cAAc;IACd,YAAY;CACb,CAAC,CAAA;AAEF,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;IAChC,WAAW;IACX,SAAS;IACT,SAAS;IACT,YAAY;IACZ,gBAAgB;IAChB,WAAW;IACX,cAAc;IACd,YAAY;CACb,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CACtC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;IACf,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,QAAQ;IACjB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;CAC/G,CAAC,EACF,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE;IACd,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,cAAc;IACvB,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;QAClB,WAAW;QACX,YAAY;QACZ,UAAU;QACV,kBAAkB;QAClB,gBAAgB;QAChB,SAAS;QACT,SAAS;QACT,YAAY;QACZ,YAAY;QACZ,gBAAgB;QAChB,WAAW;QACX,cAAc;QACd,YAAY;KACb,CAAC;CACH,CAAC,EACF,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE;IAClB,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,mBAAmB;IAC5B,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;QAClB,kBAAkB;QAClB,gBAAgB;QAChB,eAAe;QACf,YAAY;QACZ,WAAW;QACX,SAAS;QACT,YAAY;QACZ,YAAY;QACZ,gBAAgB;QAChB,WAAW;QACX,cAAc;KACf,CAAC;CACH,CAAC,EACF,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;IACf,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,mBAAmB;IAC5B,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;QAClB,kBAAkB;QAClB,gBAAgB;QAChB,eAAe;QACf,YAAY;QACZ,WAAW;QACX,SAAS;QACT,YAAY;QACZ,YAAY;QACZ,gBAAgB;QAChB,WAAW;QACX,cAAc;KACf,CAAC;CACH,CAAC,EACF,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE;IAChB,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;QAClB,WAAW;QACX,YAAY;QACZ,gBAAgB;QAChB,WAAW;QACX,cAAc;QACd,YAAY;QACZ,iBAAiB;KAClB,CAAC;CACH,CAAC,EACF,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE;IACjB,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;QAClB,WAAW;QACX,cAAc;QACd,YAAY;QACZ,gBAAgB;QAChB,WAAW;QACX,cAAc;QACd,YAAY;KACb,CAAC;CACH,CAAC,EACF,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAClH,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE;IACjB,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,YAAY;CACpB,CAAC;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,6EAA6E;AAC7E,aAAa;AACb,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;IACf,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,WAAW;IACpB,OAAO,EAAE,YAAY;IACrB,KAAK,EAAE,kBAAkB;CAC1B,CAAC,EACF,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE;IAChB,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,WAAW;IACpB,OAAO,EAAE,YAAY;IACrB,KAAK,EAAE,kBAAkB;IACzB,MAAM,EAAE,IAAI;CACb,CAAC,CACH,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;AAgDzB,MAAM,mBAAmB,GAAG,CAAC,OAAyC,EAAsB,EAAE;IAC5F,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,eAAe;YAAE,OAAO,KAAK,CAAA;IAC1D,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAyC,EAAsB,EAAE;IAChG,MAAM,aAAa,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAClD,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACjD,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAC5D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAA;AACnB,CAAC,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;AAEjC;;;GAGG;AACH,MAAM,sBAAsB,GAAG,CAAC,QAAgB,EAAE,MAAc,EAAW,EAAE;IAC3E,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACjE,IAAI,UAAU,GAAG,aAAa,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAA;IAE1D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,UAAU,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IACvE,CAAC;IAED,OAAO,UAAU,KAAK,CAAC,CAAA;AACzB,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAA0B,EAAiB,EAAE,CAAC,CAAC;IACjF,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE;QACxB,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;QAC5C,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,KAAK,SAAS,IAAI,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC;YAC9G,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;gBACf,GAAG,OAAO,CAAC,SAAS;gBACpB,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;aACzC,CAAC;YACF,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC,CAAC,CAAA;IACzF,CAAC;CACF,CAAC,CAAA;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,cAA4C,EAAiB,EAAE,CAAC,CAAC;IAChG,YAAY,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAC9B,cAAc,CAAC,MAAM,CACnB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,CACzB,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,EACpG,MAAM,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC,CAAC,CACpF;CACJ,CAAC,CAAA;AAgBF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,aAA4B,EAAE,UAAuB,EAAE,EAAE,EAAE;IACnF,MAAM,UAAU,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAA;IACxE,OAAO,KAAK,CAAC,OAAO,CAClB,WAAW,EACX,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CACf,MAAM,CAAC,OAAO,CACZ,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,EACvF,CAAC,SAAS,EAAE,EAAE,CACZ,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,cAAc,CAAC,gBAAgB,EAAE,SAAS,CAAC,EAClD,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,UAAU,CAAC,CACjD,CACJ,CACJ,CAAA;AACH,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAA0B,EAAE,EAAE,CAC5D,SAAS,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAA;AAEtE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,YAAmC;IAC/D,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,MAAM;IACZ,SAAS,EAAE,CAAC;CACb,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAA","sourcesContent":["/**\n * Schema-backed RPC projection of the control service.\n *\n * @since 0.1.0\n */\n\nimport { NotificationError } from \"@smthrs/notifications/NotificationQueue\"\nimport { Context, Effect, Layer, Schema, SchemaTransformation } from \"effect\"\nimport { Rpc, RpcGroup, RpcMiddleware } from \"effect/unstable/rpc\"\nimport {\n  AlreadyResolved,\n  ClaimLost,\n  CodeDrift,\n  ControlErrorSchema,\n  EnvelopeMismatch,\n  FlowNotFound,\n  InvalidInput,\n  LaunchFailed,\n  NoMatchingWait,\n  PersistenceError,\n  PlanDenied,\n  PlanDigestMismatch,\n  PlanNotFound,\n  RunNotFound,\n  TransportError,\n  Unauthorized,\n  Unavailable\n} from \"./ControlError.ts\"\nimport {\n  ApprovalInputSchema,\n  CancelInputSchema,\n  ControlEvent,\n  ListRequest,\n  ListResponse,\n  PlanCard,\n  PlanInputSchema,\n  type Principal,\n  Receipt,\n  ResumeInputSchema,\n  RunInputSchema,\n  SignalInputSchema,\n  SteerInputSchema,\n  WatchFilter\n} from \"./ControlSchema.ts\"\n\n/**\n * Authenticated principal made available to control RPC handlers.\n *\n * @category services\n * @since 0.1.0\n */\nexport class ControlPrincipal extends Context.Service<ControlPrincipal, typeof Principal.Type>()(\n  \"/control/ControlPrincipal\"\n) {}\n\n/**\n * Middleware boundary that authenticates control RPC requests.\n *\n * @category middleware\n * @since 0.1.0\n */\nexport class ControlAuth extends RpcMiddleware.Service<ControlAuth, {\n  provides: ControlPrincipal\n}>()(\"/control/ControlAuth\", { error: Unauthorized }) {}\n\n/**\n * Which authenticated principals read every run.\n *\n * `List` and `Watch` answer a principal this returns `true` for with every\n * run: that principal is an operator. Every other principal reads only the\n * runs it launched (`RunSummary.launchedBy`) and, from `Watch`, only their\n * events. The authentication layer decides, because it is what knows which\n * identities it can stamp: `layerBearerAuth` and `layerNoopAuth` stamp one\n * principal and make it the operator, and `layerAuth` takes the rule as an\n * option. Where nothing provides one, no principal is an operator.\n *\n * @category services\n * @since 1.0.0\n */\nexport const RunVisibility = Context.Reference<{\n  readonly seesAllRuns: (principal: typeof Principal.Type) => boolean\n}>(\"/control/RunVisibility\", { defaultValue: () => ({ seesAllRuns: () => false }) })\n\n/**\n * The sentence a client reads when a control handler dies.\n *\n * @category defects\n * @since 1.0.0\n */\nexport const defectMessage = \"Something went wrong on our side. Not your fault.\"\n\n/**\n * Wire schema for a control RPC defect: an untyped failure that no procedure\n * declares.\n *\n * Encoding replaces a defect value (an `Error`, a failure an `orDie` turned\n * into a defect, any non-string value) with `{ name: \"Error\", message }`\n * carrying {@link defectMessage}, so a driver message, path, or stack never\n * reaches a client. The server logs the raw defect. A string passes unchanged:\n * the RPC server's own request-decoding sentence, which describes the caller's\n * payload, is one, and so is an author-written `Effect.die` sentence.\n *\n * Decoding is Effect's default `Schema.Defect()` decoding, so a client reads\n * this shape and an older server's shape alike, and an older client reads this\n * shape as an `Error`.\n *\n * @category defects\n * @since 1.0.0\n */\nexport const ControlDefect = Schema.Json.pipe(Schema.decodeTo(\n  Schema.Unknown,\n  SchemaTransformation.transform({\n    decode: Schema.decodeSync(Schema.Defect()),\n    encode: (defect): Schema.Json => typeof defect === \"string\" ? defect : { name: \"Error\", message: defectMessage }\n  })\n))\n\nconst mutationErrors = Schema.Union([\n  RunNotFound,\n  ClaimLost,\n  InvalidInput,\n  PersistenceError,\n  Unavailable,\n  TransportError,\n  Unauthorized\n])\n\nconst resumeErrors = Schema.Union([\n  RunNotFound,\n  ClaimLost,\n  CodeDrift,\n  InvalidInput,\n  PersistenceError,\n  Unavailable,\n  TransportError,\n  Unauthorized\n])\n\n/**\n * The ten remote procedures corresponding to `Control` operations.\n *\n * @category groups\n * @since 0.1.0\n */\nexport const ControlRpcs = RpcGroup.make(\n  Rpc.make(\"Plan\", {\n    defect: ControlDefect,\n    payload: PlanInputSchema,\n    success: PlanCard,\n    error: Schema.Union([FlowNotFound, InvalidInput, PersistenceError, Unavailable, TransportError, Unauthorized])\n  }),\n  Rpc.make(\"Run\", {\n    defect: ControlDefect,\n    payload: RunInputSchema,\n    success: Receipt,\n    error: Schema.Union([\n      RunNotFound,\n      PlanNotFound,\n      PlanDenied,\n      PlanDigestMismatch,\n      EnvelopeMismatch,\n      ClaimLost,\n      CodeDrift,\n      InvalidInput,\n      LaunchFailed,\n      PersistenceError,\n      Unavailable,\n      TransportError,\n      Unauthorized\n    ])\n  }),\n  Rpc.make(\"Approve\", {\n    defect: ControlDefect,\n    payload: ApprovalInputSchema,\n    success: Receipt,\n    error: Schema.Union([\n      PlanDigestMismatch,\n      EnvelopeMismatch,\n      AlreadyResolved,\n      PlanNotFound,\n      RunNotFound,\n      CodeDrift,\n      InvalidInput,\n      Unauthorized,\n      PersistenceError,\n      Unavailable,\n      TransportError\n    ])\n  }),\n  Rpc.make(\"Deny\", {\n    defect: ControlDefect,\n    payload: ApprovalInputSchema,\n    success: Receipt,\n    error: Schema.Union([\n      PlanDigestMismatch,\n      EnvelopeMismatch,\n      AlreadyResolved,\n      PlanNotFound,\n      RunNotFound,\n      CodeDrift,\n      InvalidInput,\n      Unauthorized,\n      PersistenceError,\n      Unavailable,\n      TransportError\n    ])\n  }),\n  Rpc.make(\"Steer\", {\n    defect: ControlDefect,\n    payload: SteerInputSchema,\n    success: Receipt,\n    error: Schema.Union([\n      RunNotFound,\n      InvalidInput,\n      PersistenceError,\n      Unavailable,\n      TransportError,\n      Unauthorized,\n      NotificationError\n    ])\n  }),\n  Rpc.make(\"Signal\", {\n    defect: ControlDefect,\n    payload: SignalInputSchema,\n    success: Receipt,\n    error: Schema.Union([\n      RunNotFound,\n      NoMatchingWait,\n      InvalidInput,\n      PersistenceError,\n      Unavailable,\n      TransportError,\n      Unauthorized\n    ])\n  }),\n  Rpc.make(\"Cancel\", { defect: ControlDefect, payload: CancelInputSchema, success: Receipt, error: mutationErrors }),\n  Rpc.make(\"Resume\", {\n    defect: ControlDefect,\n    payload: ResumeInputSchema,\n    success: Receipt,\n    error: resumeErrors\n  }),\n  // `list` and `watch` carry the whole `ControlError` union in their contract,\n  // so they name it once rather than restating its members. Two hand-copied\n  // lists is how `CredentialConflict` came to be a control error the union did\n  // not admit.\n  Rpc.make(\"List\", {\n    defect: ControlDefect,\n    payload: ListRequest,\n    success: ListResponse,\n    error: ControlErrorSchema\n  }),\n  Rpc.make(\"Watch\", {\n    defect: ControlDefect,\n    payload: WatchFilter,\n    success: ControlEvent,\n    error: ControlErrorSchema,\n    stream: true\n  })\n).middleware(ControlAuth)\n\n/**\n * The call a boundary is authenticating, when it knows one: the procedure's\n * tag and the payload it was sent. An edge authenticating a socket upgrade\n * knows no call and passes none.\n *\n * @category models\n * @since 1.0.0\n */\nexport interface Call {\n  readonly rpc: string\n  readonly payload: unknown\n}\n\n/**\n * Header authenticator used by the control RPC boundary.\n *\n * `call` is present for an in-band RPC frame and absent at a transport edge.\n * An authenticator that grants everything ignores it; one that grants a\n * scope reads it, and admits an edge on the credential alone.\n *\n * @category models\n * @since 0.1.0\n */\nexport interface Authenticator {\n  readonly authenticate: (\n    headers: Readonly<Record<string, string>>,\n    call?: Call | undefined\n  ) => Effect.Effect<typeof Principal.Type, Unauthorized>\n}\n\n/**\n * Configuration for the single-token bearer authenticator.\n *\n * Every request carrying the configured token receives the same principal.\n * This is the intentionally small alpha trust boundary, not a per-user\n * authorization system.\n *\n * @category models\n * @since 0.1.0\n */\nexport interface BearerAuthOptions {\n  readonly token: string\n  readonly principal: Omit<typeof Principal.Type, \"stampedAt\">\n  readonly now?: (() => number) | undefined\n}\n\nconst authorizationHeader = (headers: Readonly<Record<string, string>>): string | undefined => {\n  for (const [name, value] of Object.entries(headers)) {\n    if (name.toLowerCase() === \"authorization\") return value\n  }\n  return undefined\n}\n\n/**\n * The bearer credential a request carries, or `undefined` when its\n * `Authorization` header is absent or is not a well-formed bearer scheme.\n *\n * @category getters\n * @since 1.0.0\n */\nexport const bearerCredential = (headers: Readonly<Record<string, string>>): string | undefined => {\n  const authorization = authorizationHeader(headers)\n  if (authorization === undefined) return undefined\n  const match = /^Bearer[\\t ]+([^\\t ]+)$/i.exec(authorization)\n  return match?.[1]\n}\n\nconst encoder = new TextEncoder()\n\n/**\n * Compares UTF-8 credentials without returning early for a secret-dependent\n * byte or length difference.\n */\nconst constantTimeTokenEqual = (expected: string, actual: string): boolean => {\n  const expectedBytes = encoder.encode(expected)\n  const actualBytes = encoder.encode(actual)\n  const length = Math.max(expectedBytes.length, actualBytes.length)\n  let difference = expectedBytes.length ^ actualBytes.length\n\n  for (let index = 0; index < length; index++) {\n    difference |= (expectedBytes[index] ?? 0) ^ (actualBytes[index] ?? 0)\n  }\n\n  return difference === 0\n}\n\n/**\n * Authenticates one shared bearer token and stamps its server-owned principal.\n * Missing, malformed, empty, and incorrect credentials all fail closed with\n * the same `Unauthorized` response.\n *\n * @category constructors\n * @since 0.1.0\n */\nexport const bearerAuthenticator = (options: BearerAuthOptions): Authenticator => ({\n  authenticate: (headers) => {\n    const credential = bearerCredential(headers)\n    return options.token.length > 0 && credential !== undefined && constantTimeTokenEqual(options.token, credential)\n      ? Effect.succeed({\n        ...options.principal,\n        stampedAt: options.now?.() ?? Date.now()\n      })\n      : Effect.fail(new Unauthorized({ message: \"A valid bearer credential is required\" }))\n  }\n})\n\n/**\n * The first authenticator to accept a request answers for all of them. Each\n * is asked in order, and a request none accepts fails with the last refusal,\n * or with the plain `Unauthorized` when there is nothing to ask.\n *\n * @category constructors\n * @since 1.0.0\n */\nexport const anyAuthenticator = (authenticators: ReadonlyArray<Authenticator>): Authenticator => ({\n  authenticate: (headers, call) =>\n    authenticators.reduce<Effect.Effect<typeof Principal.Type, Unauthorized>>(\n      (attempt, authenticator) =>\n        Effect.catchTag(attempt, \"/control/Unauthorized\", () => authenticator.authenticate(headers, call)),\n      Effect.fail(new Unauthorized({ message: \"A valid bearer credential is required\" }))\n    )\n})\n\n/**\n * Options for {@link layerAuth}.\n *\n * @category models\n * @since 1.0.0\n */\nexport interface AuthOptions {\n  /**\n   * The operators: the principals `List` and `Watch` show every run. Omitted,\n   * every principal reads only the runs it launched. See {@link RunVisibility}.\n   */\n  readonly seesAllRuns?: ((principal: typeof Principal.Type) => boolean) | undefined\n}\n\n/**\n * Provides `ControlAuth` from a transport-header authenticator, telling it\n * which procedure and payload each frame carries. Each authenticated call\n * also receives the {@link RunVisibility} rule for the principal it stamps.\n *\n * @category layers\n * @since 0.1.0\n */\nexport const layerAuth = (authenticator: Authenticator, options: AuthOptions = {}) => {\n  const visibility = { seesAllRuns: options.seesAllRuns ?? (() => false) }\n  return Layer.succeed(\n    ControlAuth,\n    (effect, call) =>\n      Effect.flatMap(\n        authenticator.authenticate(call.headers, { rpc: call.rpc._tag, payload: call.payload }),\n        (principal) =>\n          effect.pipe(\n            Effect.provideService(ControlPrincipal, principal),\n            Effect.provideService(RunVisibility, visibility)\n          )\n      )\n  )\n}\n\n/**\n * Provides `ControlAuth` using one shared bearer token. Its one principal is\n * the operator and reads every run.\n *\n * @category layers\n * @since 0.1.0\n */\nexport const layerBearerAuth = (options: BearerAuthOptions) =>\n  layerAuth(bearerAuthenticator(options), { seesAllRuns: () => true })\n\n/**\n * Permissive authentication middleware for tests and trusted in-process use.\n *\n * @category layers\n * @since 0.1.0\n */\nexport const layerNoopAuth = (principal: typeof Principal.Type = {\n  id: \"test-principal\",\n  kind: \"test\",\n  stampedAt: 0\n}) => layerAuth({ authenticate: () => Effect.succeed(principal) }, { seesAllRuns: () => true })\n"]}